[dicko72]

Folks,

I have 2 routers with ddwrt.
Primary is 192.168.2.1 and is in client mode with WAN 192.168.0.2. This has DHCP enabled and acts as a gateway operating well.

Secondary router is linked with WAN assigned to switch, running in router mode with 192.168.2.2.

I want to use policy based routing for a few IP's to route them through the VPN. Not fussed which router I put the VPN on, but I think it needs to go on the secondary?

VPN is connected. When I disable firewall protection I can see when doing a tracert that traffic is going through the VPN. But web pages dont work, so something not right.

What else ya need to know?

Thanks in advance

[egc]

Be sure to disable Shortcut Forwarding Engine on the setup page there is a bug which prevents http traffic when using PBR and SFE

[dicko72]

OK thanks for replies.I do have PBR enabled for 1 host. This host cannot access web pages but public DNS resolution works and tracert on windows shows it traversing the vpn and arrives at destination ok (8.8.8.8).

I have disabled SFE on both routers.

When I remove it from the PBR everything works as expected.

Primary router is in client mode connected to a 4G modem with wifi.

Correction: testing was done on windows. I will do the tests on the router through a shell when I get home. Sorry misread!

[egc]

This typically sounds as if you have Shortcut Forwarding Engine enabled.
You can ping and have DNS but no http traffic.
If your provider allows ftp you can check: ftp://ftp.dd-wrt.com/ this is working with SFE on

[dicko72]

Yeah, so all works from the router too.
DNS and tracert to a public IP.

I also have issues with torrents too though, not just http/https.

I'm using a beta build on my WNDR3700.

Should I try a later build?

[dicko72]

OK, tried build 05-07-2018-r35898
Works perfectly! Thanks all.

[thomasashwin]

Hello Dicko,
According to my personal experience, it will better for you to take the suggestion from one of the best networking service provider agency. And if you will take my recommendation then Wanos.co is one of the best choices for you. You can contact him.